172 matches found
Mailphish
Mailphish Разработано Pro MCracker Mailphish поможет вам быстро и легко создавать профессиональные фишинговые письма Посетите наши сайты для изучения методов взлома https://crackcodes.xyz и https://crackcodes.in Если вы скопируете код и сделаете свой, не забудьте отдать мне должное, малыш! Вы не...
PhEmail
PhEmail PhEmail — это написанный на Python инструмент с открытым исходным кодом для фишинговых писем, который автоматизирует процесс отправки фишинговых писем в рамках тестирования социальной инженерии. Основная цель PhEmail — отправить набор фишинговых писем и выяснить, кто на них перешел, не...
cve-2023-23397-purple-team
CVE-2023-23397 — Purple Team: эксплуатация + обнаружение Две половины одного проекта, направленного на одну и ту же уязвимость утечки NTLM в Outlook CVE-2023-23397: Red team готово: фишинговая доставка + эксплуатация CVE-2023-23397 против виртуальной машины жертвы на Windows 10, полный отчёт в...
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298-
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- Нам предстоит расследовать критическое оповещение о эксплуатации уязвимости Windows OLE zero-click RCE CVE-2025-21298, доставленной через вредоносное вложение в формате RTF. Расследование оповещения из LetsDefend 4...
SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298
SOC336 - Windows OLE 제로 클릭 RCE 악용 탐지 CVE-2025-21298 워크스루 🔎 목차 1. 상황 2. 경고 개요 3. 사용된 도구 4...
CVE-2024-43451-POC
Description Name : CVE-2024-43451 CVSSv3 Score : 6.5 Affected Versions : All Microsoft Windows versions before the Nov 2024 Patch CVE-2024-43451 est une vulnérabilité zero-day dans Microsoft Windows qui permet aux attaquants de capturer des hachages de mot de passe NTLMv2 avec une interaction...
Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413
Project Goal: Проект был создан для демонстрации использования различных инструментов для захвата NTLM-хешей пользователей в сети и выполнения фишинговых атак с помощью электронной почты. Это показывает, как уязвимости сетевой аутентификации и фишинговые методы могут быть использованы для...
Exploit for Improper Input Validation in Microsoft
TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full w...
Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
The North Korean state-sponsored hacking group known as ScarCruft aka APT37 has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver a new malware called NarwhalRAT. "The attack email contained a message impersonating an MS account security...
CVE-2026-43876 WWBN AVideo: HTML Injection in notifySubscribers.json.php Enables Platform-Branded Phishing Emails to Channel Subscribers
WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/notifySubscribers.json.php takes the raw message POST parameter and passes it into sendSiteEmail, which substitutes it directly into an HTML email template via strreplace on the message placeholder and...
“Your shipment has arrived” email hides remote access software
An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to explore a network, steal data, and drop additional malware. A German industrial spare parts and equipment supplier received an ema...
PT-2026-28215
Hi guys! Recently I got this email from [email protected]. I read through the email and spotted a few grammatical errors, as well as a share.google link, which I thought was unusual for Microsoft to do. Even though it was fully delivered and signed by GitHub.com, I realised that what the...
Before You Hand over the Wheel: Evaluating LLMs for Security Incident Analysis
Security incident analysis SIA poses a major challenge for security operations centers, which must manage overwhelming alert volumes, large and diverse data sources, complex toolchains, and limited analyst expertise. These difficulties intensify because incidents evolve dynamically and require...
How fake party invitations are being used to install remote access tools
“You’re invited!” It sounds friendly, familiar and quite harmless. But in a scam we recently spotted, that simple phrase is being used to trick victims into installing a full remote access tool on their Windows computers—giving attackers complete control of the system. What appears to be a casual...
Be careful responding to unexpected job interviews
One of our customers was contacted on LinkedIn about a job offer. The initial message was followed up by an email: “Thank you for your interest in the Senior Construction Manager position at company. After reviewing your background, we were impressed with your experience and would like to invite...
We opened a fake invoice and fell down a retro XWorm-shaped wormhole
Somebody forwarded an “invoice” email and asked me to check the attachment because it looked suspicious. Good instinct—it was, and what we found inside was a surprisingly old trick hiding a modern threat. What it does If the recipient had opened the attached Visual Basic Script .vbs file, it woul...
Phishing emails disguised as spam filter alerts are stealing logins
Cybercriminals are spoofing "email delivery" notifications to look like they came from spam filters inside your own organization. The goal is to lure you to a phishing site that steals login credentials—credentials that could unlock your email, cloud storage or other personal accounts. The email...
How credentials get stolen in seconds, even with a script-kiddie-level phish
This attempt to phish credentials caught our attention, mostly because of its front-end simplicity. Even though this is a script-kiddie-level type of attack, we figured it was worth writing up—precisely because it’s so easy to follow what they're up to. The email is direct and to the point. Not a...
